The core requirements for entities covered by the final rule are: (1) to designate a cybersecurity officer (CySO), (2) to ...